Forgotten password also handles empty private email, not just nil